From 42d84248aa21a1ac4a909964a7bdc6c31e32a0a5 Mon Sep 17 00:00:00 2001
From: Florent Tapponnier <florent.tapponnier@gmail.com>
Date: Fri, 29 May 2026 11:45:10 +0200
Subject: [PATCH] scrub deploy IDs and team scope from public workflow

---
 .github/workflows/staging-deploy.yml | 12 +-----------
 AGENTS.md                            |  2 +-
 2 files changed, 2 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/staging-deploy.yml b/.github/workflows/staging-deploy.yml
index 0a1aeee2..528eec40 100644
--- a/.github/workflows/staging-deploy.yml
+++ b/.github/workflows/staging-deploy.yml
@@ -1,15 +1,5 @@
 name: Vercel staging deploy
 
-# Auto-deploy to Vercel Preview on every push to dev. Workaround for the
-# Vercel ↔ GitHub App pairing being unreliable across the OpenChainBench
-# (user account) + mobula-labs (Vercel team) setup. The Action calls the
-# Vercel CLI directly with VERCEL_TOKEN, bypassing the App webhook flow.
-#
-# Required GitHub secrets (Settings → Secrets and variables → Actions):
-#   VERCEL_TOKEN       — vercel.com/account/tokens, scope = mobula-labs
-#   VERCEL_ORG_ID      — team_FBSeNa7wUR3XTi1ucbjRdAAv
-#   VERCEL_PROJECT_ID  — prj_IgUo7t17IBKw5XBBz9IiarFkIVOs
-
 on:
   push:
     branches:
@@ -61,7 +51,7 @@ jobs:
           vercel alias set "${{ steps.deploy.outputs.url }}" \
             staging-openchainbench.vercel.app \
             --token=${{ secrets.VERCEL_TOKEN }} \
-            --scope=mobula-labs
+            --scope=${{ secrets.VERCEL_ORG_ID }}
 
       - name: Comment summary
         run: |
diff --git a/AGENTS.md b/AGENTS.md
index d9a6850a..7502e8c0 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -9,7 +9,7 @@ This version has breaking changes. APIs, conventions, and file structure may all
 Two long-lived branches:
 
 - `main` → openchainbench.com (production). Vercel auto-deploy on push is **disabled**; production deploys are **manual** via `vercel --prod` from a checkout of `main`.
-- `dev` → staging. Each push triggers `.github/workflows/vercel-staging.yml` which calls Vercel CLI with a token and emits a Preview URL. The Vercel GitHub App is NOT used for staging because the OpenChainBench user account + mobula-labs Vercel team pairing wouldn't propagate.
+- `dev` → staging. Each push triggers `.github/workflows/staging-deploy.yml` which calls Vercel CLI with a token and emits a Preview URL.
 
 **Standard flow:**